AMENDMENTS TO THE CLAIMS 



1 . (Currently Amended) In a wireless network having at least two access points (APs), 
each AP having a predetermined service area, and a station (STA) that receives a communication 
service by associating with a first AP being one of the at least two APs, a method of supporting a 
roaming service for the STA at the first AP, comprising the steps of: 

generating an AP-neighborhood graph containing neighbor APs to which the STA can 

move; 

acquiring security proactiv e keys for the neighbor APs based on association information 

gained from the association of the STA to the first AP; and 

transmitting the security proactive keys to the neighbor APs by proactive caching, 
whereby performing a pre-authentication such that when the STA attempts to roam to one 

of the neighbor APs, fast roaming is provided via a security proactiv e key provided to the 

neighbor AP. 

2. (Original) The method of claim 1, wherein an AP-neighborhood graph is generated at 
each of the at least two APs. 

3. (Original) The method of claim 2, wherein the neighbor APs are APs within a distance 
less than a predetermined threshold, to which the STA can move from the first AP without being 
by way of any other AP. 

4. (Original) The method of claim 1, wherein the association information includes a 
pairwise master key (PMK: PMKc urT ) and a roam key (RK) which are acquired at the first AP, 
and the MAC addresses of the STA and the neighbor APs (STA mac and next AP mac ), and a PMK 
(PMKnext) for each of the neighbor APs is acquired using the association information and 
determined by 

PMKnext = PRF(RK, PMKc UIT , STA mac , next AP mac ) 
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5. (Original) The method of claim 4, wherein the RK is determined by 

RK = PRF(PMK, "Roam Key", AP 

nonce? STAnonce) 

where AP n0 nce is a random number set by the first AP, STA n0 nce is a random number set by the 
STA, and "Roam Key" is a random number generated during generating PTKc Urr using PMKc urT . 

6. (Currently Amended) In a wireless network having at least two access points (APs), 
each AP having a predetermined service area, and a station (STA) that receives a communication 
service by associating with a first AP being one of the at least two APs, a method of supporting a 
roaming service for the STA at a neighbor AP of the first AP, the neighbor AP being managed by 
an AP-neighborhood graph drawn for the first AP, comprising the steps of: 

receiving a security proactive key from the first AP by proactive caching, among 
proactive keys generated for neighbor APs using association information gained from the 
association of the STA to the first AP by the first AP; and 

performing fast roaming using the security proactive key when the STA attempts to roam 
to a neighbor AP. 

7. (Original) The method of claim 6, wherein the association information includes a 
pairwise master key (PMK: PMKc Urr ) and a roam key (RK) which are acquired at the first AP, 
and the MAC addresses of the STA and the neighbor APs (STA mac and next AP mac ), and a PMK 
(PMK n ext) for each of the neighbor APs is acquired using the association information and 
determined by 

PMKnext = PRF(RK, PMKcurr, STA mac , next AP mac ) 

8. (Original) The method of claim 7, wherein the RK is determined by 

RK = PRF(PMK, "Roam Key", AP nonce? STAnonce) 
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where AP n0 nce is a random number set by the first AP, STA n0 nc e is a random number set by the 
STA, and "Roam Key" is a random number generated during generating PTKc Ur r using PMKc UIT . 

9. (Currently Amended) In a wireless network having at least two access points (APs), 
each AP having a predetermined service area, and a station (STA) that receives a communication 
service by associating to a first AP being one of the APs, a method of supporting a roaming 
service between the first AP and a neighbor AP of the first AP, the neighbor AP being managed 
by an AP-neighborhood graph drawn for the first AP, comprising the steps of: 

acquiring security proactive keys for neighbor APs based on association information and 
transmitting the security proact ive keys to the neighbor APs by proactive caching, the association 
information being gained from the association of the STA to the first AP by the first AP; and 

receiving a security proactive key from the first AP and performing fast roaming using the 
security p roactive key at a neighbor AP when the STA attempts to roam to the neighbor AP. 

10. (Original) The method of claim 9, wherein the association information includes a 
pairwise master key (PMK: PMKc urr ) and a roam key (RK) which are acquired at the first AP, 
and the MAC addresses of the STA and the neighbor APs (STA mac and next APmac), and a PMK 
(PMK n ext) for each of the neighbor APs is acquired using the association information and 
determined by 

PMKnext = PRF(RK, PMKc UIT , STA mac , next AP mac ) 

11. (Original) The method of claim 10, wherein the RK is determined by 

RK = PRF(PMK, "Roam Key", AP nonces STA n0 nce) 

where AP n0 nce is a random number set by the first AP, STA n0 nce is a random number set by the 
STA, and "Roam Key" is a random number generated during generating PTKc Urr using PMKc urr . 

12. (Currently Amended) In a wireless network having at least two access points (APs), 
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each AP having a predetermined service area, a station (STA) that receives a communication 
service by associating with a first AP being one of the at least two APs, an authentication server 
(AS) that authenticates the STA, and an accounting server that provides billing for the STA, a 
method of supporting a roaming service for the STA, comprising the steps of: 

generating at the accounting server an AP-neighborhood graph for the first AP to manage 
neighbor APs to which the STA can move from the first AP; 

notifying by the accounting server when the first AP reports to the accounting server 
completed association of the STA to the first AP the neighbor APs of the association; 

requesting a security proactive key to the AS in response to the notification from the 
accounting server by each of the neighbor APs; 

generating a securi ty proacti v e key for each of the neighbor APs based on association 
information from the association of the STA to the first AP in response to the request and 
transmitting the security proactiv e key to the neighbor AP by the AS; and 

performing a pre-authentication when the STA attempts to roam to one of the neighbor 
APs, so that fast roaming can be carried out using the security p roactiv e key provided to the 
neighbor AP. 

13. (Original) The method of 12, wherein the accounting server generates an AP- 
neighborhood graph for each of the at least two APs. 

14. (Original) The method of claim 13, wherein the neighbor APs are APs within a 
distance less than a predetermined threshold, to which the STA can move from the first AP 
without being by way of any other AP. 

15. (Currently Amended) The method of claim 12, wherein the association information 
includes a master key (MK), a pairwise master key (PMK: PMKc Ur r) assigned to the first AP, and 
the MAC addresses of the STA and the neighbor APs (STA mac and next AP mac ), and a PMK 
(PMKnext) for each of the neighbor APs is acquired using the association information and 
determined by 

PMK n ext = PRF(MK, PMKcurr, STA mac , next AP mac ), 
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